{"report_id":"de5eb02d-743b-4dae-8343-4a5ff4e8c0d6","version":0,"status":"done","tags":["microsoft","phishing"],"date":"2026-08-27T22:31:32Z","url":{"schema":"https","addr":"www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"ip":{"addr":"185.80.49.249","port":0,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"final":{"url":{"schema":"https","addr":"www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"title":"Outlook Web App","dom":{"size":54889,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10412)","md5":"cfe3b4a0e19532852c5013571f5434b2","sha1":"26ac231f190e6013fb2bab9bbdb8539c2941291a","sha256":"0565d3610c14b933685172050791d0c287b828cdf4ef4beb0231e127102b4914","sha512":"63f99e604c8c17f34c49efa8b972617ce1b2e28e4afe0aeb60853970726ea75d5c3eeb4a3a25b173c0773a4629b884a85a73f761d1e26127964f2898ef014140","ssdeep":"768:kydXYW0nEIlX5qEdgI81ay29wkzdKV7aQblNoJmgK4e2FuzWg92cz:snEgX5rMay29wEkF5F4nFuScz","tlshash":"a3339d2fa8e63d3214566174a3a7f2877f2ac403874ed814787c5798ef80d9281be7d9","dom_hash":"domhash897c92cdbfaaeaed607ac17d41319b6f","first_seen":"2026-08-27T22:31:33.515484Z","last_seen":"2026-08-27T22:31:33.515484Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"ip":{"addr":"185.80.49.249","port":0,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-01T22:31:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"www.5mp.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"www.5mp.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"www.5mp.eu","ip":{"addr":"185.80.49.249","port":443,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"domain_registered":"unknown","domain_rank":2594421,"first_seen":"2012-10-02T02:28:26Z","last_seen":"2026-08-20T02:47:28.9606Z","alert_count":6,"request_count":2,"received_data":102674,"sent_data":1085,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Outlook Web App:15.0.1497","description":"Outlook on the web is an information manager web app. It includes a web-based email client, a calendar tool, a contact manager, and a task manager.","website":"https://help.outlook.com","common_platform_enumeration":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","icon":"Outlook.svg","categories":["Webmail"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"ip":{"addr":"185.80.49.249","port":443,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c1ccbabd889cf21821ccbb7c2a9777f","sha1":"ff0260ab215fc9e352ac4542f60da05dc821bd2f","sha256":"86c10ad0ff7a795d0424266ae3a83ca122484ef6bb0d4b38bf33420de6bb9d08","sha512":"9c667bf4a3d34765cb30655a630130b8cf5a261ad2fb69ac350090d8666bb02cb7de0f87553ec1752481b7f9f44c35c8afc4671b7b21b5c7f328da6e6a7565dd","ssdeep":"384:XP+tqnEQHAHI92eRGi1SaIiGi5qEHd3gZiNVt:XW0nEIlX5qEdgIF","tlshash":"7f52842dacf929b21852a235475ff2c7f365c917930cd818b86d8394bf4055386be2d7","size":14412,"data":"","first_seen":"2026-08-27T22:31:33.519508Z","last_seen":"2026-08-27T22:31:33.519508Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"ip":{"addr":"185.80.49.249","port":443,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9b6ade36e48adaa82925dbbfa75c030","sha1":"011d6ac4386eec42907b80304919d137208afa47","sha256":"3ce417d019929df9ac07a11117002a0888f17841e33dbb390c0b91dfe86ca728","sha512":"23b0d3d435f8c88d482fde3440ea60616655689c01cda5485cd455d25315dcddaac4f15d06211c40caa44782516dac596c01d7728851056f70631db935f1737c","ssdeep":"","tlshash":"7221634e72240a73b4146d33e7ef90d3ab698e37c65cdd2590ae4cb63846409103a533","size":1390,"data":"","first_seen":"2026-08-04T16:12:09.48754Z","last_seen":"2026-08-27T22:31:33.520708Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"ip":{"addr":"185.80.49.249","port":443,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2469efbe2e261cef85d17f7561c168d1","sha1":"6d0feab9bca0a9f5d556961b16a46e2975bb9d45","sha256":"8405050d8e89857e0668c96448fcb0d3667b92f21b0d636b60cb7fa1d253098d","sha512":"76d5d981e6d38e88b6a402a6b75710dd2bb7c5dee29403cc1d615d91c98141fed6785630f9005a5dfa4df425f10df4228f055ef1bafe5d44c8a583c9b8b87ad5","ssdeep":"","tlshash":"2c31f89a705b0960799ee62d52ab66983638c003450798003d7cd75e6f36fc784a5eee","size":1743,"data":"","first_seen":"2026-08-04T16:12:09.489837Z","last_seen":"2026-08-27T22:31:33.522537Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"ip":{"addr":"185.80.49.249","port":443,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c962610acdfab7e9b841946b87ec1f0","sha1":"b0fbeb4ff5500f893614aded82499043ee12a4b0","sha256":"14b5e11c6e4fea12fb9546449b17dfffbddd5efe3151ecbec81e2f3162537370","sha512":"4b81a1149b9ad0224b5180a78673ee1b1419285a21dba252d62c1fb01605d37ea80924658cb383ed61cd0a9dea62ec9619b83a42c84a209a322983b083620f69","ssdeep":"","tlshash":"7c60000c03030003f00cc0cf00c0c03000300003cc0c3c0000000030000000c0000030","size":13,"data":"","first_seen":"2026-07-22T20:46:13.920062Z","last_seen":"2026-08-27T22:31:33.523763Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"ip":{"addr":"185.80.49.249","port":443,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8e77d81fa40b7d1003e9f017fccbd46","sha1":"010c94d0e5692f9007ddc4e5c88c910e3bc78f73","sha256":"1bd4c65265634b81bc08fa2c0ed8c99b6a8d6b4aca9d6d470927cb429b602511","sha512":"240315ac5a4cb3dd0394e397a70536ddd812533c6a16511b79999aaed7188513e83d9c8d86f4092c3cc98069c65d6602e573f7b6db5081d655db81a8042a4d4f","ssdeep":"","tlshash":"2fb0922a3b4206a40bb6f75d32df22013b42c0435f05b88cb87de102c7109c38878f4c","size":122,"data":"","first_seen":"2024-02-14T03:38:22Z","last_seen":"2026-08-27T22:31:33.529425Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"ip":{"addr":"185.80.49.249","port":443,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6de7cb9ae7b6b348105e7f07b724efef","sha1":"a688be18b057f63a1d4b2add9bc192f0d8594f3f","sha256":"4b18487b91e145aab62181021c90cce931d4f27a6da2a573045660055a2c89d7","sha512":"3fe9ed6596a06bffa643599e28b3189bebfd6973c2a5f78154c7d8479691dd4984edfcb725853cd5dcd29878a5d9e7f193ea0675d915cceb9a9a8aabaf7366f6","ssdeep":"","tlshash":"00a0020c04ff82500e0bd9712166c8145252140381da9704740c01038f058d480a11d5","size":62,"data":"","first_seen":"2026-08-04T16:12:09.493646Z","last_seen":"2026-08-27T22:31:33.530308Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.5mp.eu/owa/auth/15.0.1497/themes/resources/favicon.ico","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"ip":{"addr":"185.80.49.249","port":443,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","date":"2026-08-27T22:31:04.721Z","timestamp":1787869864721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.5mp.eu","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 24 Nov 2025 10:52:40 GMT","end":"Sat, 26 Dec 2026 10:52:39 GMT"},"fingerprint":{"sha1":"65:83:5C:FD:A1:C0:0E:CA:59:6D:51:95:51:9D:25:06:F7:92:7A:D2","sha256":"CF:96:2C:A6:97:51:3A:AD:1A:C9:93:B1:33:26:00:18:69:1D:D9:18:22:72:BE:3C:64:49:A6:E6:5D:B7:2B:61"}}},"request":{"raw":"GET /owa/auth/15.0.1497/themes/resources/favicon.ico HTTP/1.1\r\nHost: www.5mp.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 22:31:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 25 Jan 2024 08:56:39 GMT\r\netag: W/\"b1b2-60fc15b946612\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45490,"size_decoded":34521,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41162)","md5":"c773d78f391f8b60e7eaff42df7ae3b5","sha1":"08ce9c2dd828e66623ebf38125650f679d26bbd3","sha256":"cf7ec674c001b474d88b804d5bdd4aa9caf85d326d5c48f16ccac664bebefd71","sha512":"45d113fe314be5e58459246f6d7c6775b3905743d5e557079bc8fbc335105f307f2332aeb6a5c3b387737a1c852b8770374de0b1808fb5dd2ebd8123a5f627a6","ssdeep":"768:sTxeJqHab5K/IRXv5oK37GKLPWwiWsz+nP+/02MwMzEYdv5R4LgXyA:sTxT//IR/r3TLPWw5sz+nP+bKB4LIyA","tlshash":"a213f1b5c74fff8fd9854814395fa3ad5f1ed417e4094d6a30e108aa90ec02bf1ab2a4","first_seen":"2023-09-09T00:26:18Z","last_seen":"2026-08-27T22:31:33.517622Z","times_seen":166,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"www.5mp.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"www.5mp.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.5mp.eu/fajlok2/crreb/correo_www.5mp.eu_.html","fqdn":"www.5mp.eu","domain":"5mp.eu","tld":"eu"},"ip":{"addr":"185.80.49.249","port":443,"asn":62214,"as":"Rackforest Zrt.","country":"Hungary","country_code":"HU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-27T22:31:02.236Z","timestamp":1787869862236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.5mp.eu","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 24 Nov 2025 10:52:40 GMT","end":"Sat, 26 Dec 2026 10:52:39 GMT"},"fingerprint":{"sha1":"65:83:5C:FD:A1:C0:0E:CA:59:6D:51:95:51:9D:25:06:F7:92:7A:D2","sha256":"CF:96:2C:A6:97:51:3A:AD:1A:C9:93:B1:33:26:00:18:69:1D:D9:18:22:72:BE:3C:64:49:A6:E6:5D:B7:2B:61"}}},"request":{"raw":"GET /fajlok2/crreb/correo_www.5mp.eu_.html HTTP/1.1\r\nHost: www.5mp.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 22:31:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 26363\r\nlast-modified: Wed, 26 Aug 2026 20:42:22 GMT\r\netag: \"dd27-659f9419b95d2-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nfront-end-https: on\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Outlook Web App:15.0.1497","description":"Outlook on the web is an information manager web app. It includes a web-based email client, a calendar tool, a contact manager, and a task manager.","website":"https://help.outlook.com","common_platform_enumeration":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","icon":"Outlook.svg","categories":["Webmail"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":56615,"size_decoded":26682,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (10414), with CRLF line terminators","md5":"b2377ff838b571c5b37d9a1492b7ab23","sha1":"175e293841f8353cdc4d8e5a147f6972fc5156d3","sha256":"1d1a7c46cbc73296c12fe5292b78a69c424f864fb082522a2940046e396170f7","sha512":"ee87aae4ecfb99f592bacc5898b84a927bce9e8d556a54a2a4e57fa642d3d9d3d72fe58a07f2c1d7c26bbbe8bed4b3dec9a034f5bfea7bce80cb409ef2c584dd","ssdeep":"768:h3qbJDMy0PSF4j8k9EMDq/O/HrlQzw+TfkRdKV7aQblHoJmgK4e2Fuz2ruLce:TSFTk9Eoq/O/6zw+TfokF5r4nFuPce","tlshash":"62439e2ea845643a17336a60e7b3a247ff2180038b4ad51474fc1797afb18b5816bedd","first_seen":"2026-08-27T22:31:33.518273Z","last_seen":"2026-08-27T22:31:33.518273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2288,"timings":{"blocked":-1,"dns":2097,"connect":33,"send":0,"wait":50,"receive":34,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"www.5mp.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"www.5mp.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}